Lucene search
China National Vulnerability DatabaseCNVD-2022-83592HistoryOct 26, 2022 - 12:00 a.m.
Apache Heron Injection Vulnerability
2022-10-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
apache heron
injection vulnerability
log statements
crlf injection
stream processing engine
0.006 Low
EPSS
Percentile
78.2%
Apache Heron is a distributed, fault-tolerant real-time stream processing engine. Heron suffers from an injection vulnerability caused by a lack of escaping in log statements, which can be exploited to achieve CRLF log injection.
Related
osv
osv
Heron allows CRLF log injection
2022-10-24 19:00:16
nvd
nvd
CVE-2021-42010
2022-10-24 14:15:49
prion
prion
Crlf injection
2022-10-24 14:15:00
cvelist
cvelist
CVE-2021-42010 CRLF log injection
2022-10-24 00:00:00
github
github
Heron allows CRLF log injection
2022-10-24 19:00:16
cve
cve
CVE-2021-42010
2022-10-24 14:15:49